Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 10, 2026

Updates the requirements on surmise, pip, setuptools, globus-compute-sdk, anyio and rich to permit the latest version.
Updates surmise to 0.4.0

Release notes

Sourced from surmise's releases.

v0.4.0

Major changes

  • Improve coverage of test suite for future integration of additional code.
  • Designate methods to "research-grade" if methods are neither fully tested or maintained.
  • Integrate a first example in Jupyterbook as a collection of usage examples.
  • Improve Cython integration by reducing the number of external dependencies.
  • Develop Github wiki pages to log developer notes in terms of packaging, Cythonizing, and major dependency intricacies.

What's Changed

Full Changelog: bandframework/surmise@v0.3.1...v0.4.0

Changelog

Sourced from surmise's changelog.

Release 0.4.0

:Date: October 14, 2025

  • Improve coverage of test suite for future integration of additional code.
  • Designate methods to "research-grade" if methods are neither fully tested or maintained.
  • Integrate a first example in Jupyterbook as a collection of usage examples.
  • Improve Cython integration by reducing the number of external dependencies.
  • Develop Github wiki pages to log developer notes in terms of packaging, Cythonizing, and major dependency intricacies.

Full Changelog: bandframework/surmise@v0.3.1...v0.4.0

Release 0.3.0

:Date: September 12, 2024

  • Tested in Python 3.9, 3.10, 3.11, 3.12, on Linux, macOS, and Windows.
  • Functionality:
    • Include tox developer integration.
    • Include save/load functions for emulator and calibrator.
    • Include empirical coverage calculations in calibrator.
    • Modify covx()-returned object to improve usability.
    • Modify object repr to improve user feedback.
    • Update test suite to improve testing, including bookending versions and testing of major methods.
  • Documentation:
    • Update documentation to emphasize introductory materials and usage tutorials.
    • Update scientific usage references.
    • Update README to include collaborator and contributor list.

Full Changelog: bandframework/surmise@v0.2.1...v0.3.0

Release 0.2.1

:Date: September 26, 2023

  • Updates README to improve installation and testing procedures.
  • Updates Github action to build and upload .whl distribution files to PyPI.
  • Fixes testing procedure to ensure shell script searches under sys.path for pytest.

Release 0.2.0

:Date: September 18, 2023

  • Emulation methods:
    • Rename PCGPwMatComp to PCGPwImpute.
    • Include a new emulation method indGP.

... (truncated)

Commits
  • fb7d7f4 Merge pull request #186 from bandframework/upgradeCautionREADME
  • 1c8b5af based on review, add precautionary notes for upgrading surmise from pre-src-l...
  • b714edb Merge pull request #184 from bandframework/sdkupdate
  • 96aec9a Clarify test procedures in surmise BAND SDF
  • 5f43b19 Merge pull request #183 from bandframework/167v0.4-versioning
  • 5a1e89c spellcheck
  • 32d4605 include documentation of Cythonizing in this project, and use of wiki for dev...
  • 1919497 spellcheck
  • 0689a4c update changelog for v0.4
  • 40fad2e update v0.4 versioning in bibentry
  • Additional commits viewable in compare view

Updates pip to 26.0.1

Changelog

Sourced from pip's changelog.

26.0.1 (2026-02-04)

Bug Fixes

  • Fix --pre not being respected from the command line when a requirement file includes an option e.g. -extra-index-url. ([#13788](https://github.com/pypa/pip/issues/13788) <https://github.com/pypa/pip/issues/13788>_)

26.0 (2026-01-30)

Deprecations and Removals

  • Remove support for non-bare project names in egg fragments. Affected users should use the Direct URL requirement syntax <https://packaging.python.org/en/latest/specifications/version-specifiers/#direct-references>. ([#13157](https://github.com/pypa/pip/issues/13157) <https://github.com/pypa/pip/issues/13157>)

Features

  • Display pip's command-line help in colour, if possible. ([#12134](https://github.com/pypa/pip/issues/12134) <https://github.com/pypa/pip/issues/12134>_)

  • Support installing dependencies declared with inline script metadata (:pep:723) with --requirements-from-script. ([#12891](https://github.com/pypa/pip/issues/12891) <https://github.com/pypa/pip/issues/12891>_)

  • Add --all-releases and --only-final options to control pre-release and final release selection during package installation. ([#13221](https://github.com/pypa/pip/issues/13221) <https://github.com/pypa/pip/issues/13221>_)

  • Add --uploaded-prior-to option to only consider packages uploaded prior to a given datetime when the upload-time field is available from a remote index. ([#13625](https://github.com/pypa/pip/issues/13625) <https://github.com/pypa/pip/issues/13625>_)

  • Add --use-feature inprocess-build-deps to request that build dependencies are installed within the same pip install process. This new mechanism is faster, supports --no-clean and --no-cache-dir reliably, and supports prompting for authentication.

    Enabling this feature will also enable --use-feature build-constraints. This feature will become the default in a future pip version. ([#9081](https://github.com/pypa/pip/issues/9081) <https://github.com/pypa/pip/issues/9081>_)

  • pip cache purge and pip cache remove now clean up empty directories and legacy files left by older pip versions. ([#9058](https://github.com/pypa/pip/issues/9058) <https://github.com/pypa/pip/issues/9058>_)

Bug Fixes

  • Fix selecting pre-release versions when only pre-releases match. For example, package>1.0 with versions 1.0, 2.0rc1 now installs 2.0rc1 instead of failing. ([#13746](https://github.com/pypa/pip/issues/13746) <https://github.com/pypa/pip/issues/13746>_)
  • Revisions in version control URLs now must be percent-encoded. For example, use git+https://example.com/repo.git@issue%231 to specify the branch issue#1. If you previously used a branch name containing a % character in a version control URL, you now need to replace it with %25 to ensure correct percent-encoding. ([#13407](https://github.com/pypa/pip/issues/13407) <https://github.com/pypa/pip/issues/13407>_)
  • Preserve original casing when a path is displayed. ([#6823](https://github.com/pypa/pip/issues/6823) <https://github.com/pypa/pip/issues/6823>_)
  • Fix bash completion when the $IFS variable has been modified from its default. ([#13555](https://github.com/pypa/pip/issues/13555) <https://github.com/pypa/pip/issues/13555>_)
  • Precompute Python requirements on each candidate, reducing time of long resolutions. ([#13656](https://github.com/pypa/pip/issues/13656) <https://github.com/pypa/pip/issues/13656>_)
  • Skip redundant work converting version objects to strings when using the

... (truncated)

Commits

Updates setuptools to 82.0.0

Changelog

Sourced from setuptools's changelog.

v82.0.0

Deprecations and Removals

  • pkg_resources has been removed from Setuptools. Most common uses of pkg_resources have been superseded by the importlib.resources <https://docs.python.org/3/library/importlib.resources.html>_ and importlib.metadata <https://docs.python.org/3/library/importlib.metadata.html>_ projects. Projects and environments relying on pkg_resources for namespace packages or other behavior should depend on older versions of setuptools. (#3085)

v81.0.0

Deprecations and Removals

  • Removed support for the --dry-run parameter to setup.py. This one feature by its nature threads through lots of core and ancillary functionality, adding complexity and friction. Removal of this parameter will help decouple the compiler functionality from distutils and thus the eventual full integration of distutils. These changes do affect some class and function signatures, so any derivative functionality may require some compatibility shims to support their expected interface. Please report any issues to the Setuptools project for investigation. (#4872)

v80.10.2

Bugfixes

  • Update vendored dependencies. (#5159)

Misc

v80.10.1

Misc

v80.10.0

Features

  • Remove post-release tags on setuptools' own build. (#4530)
  • Refreshed vendored dependencies. (#5139)

... (truncated)

Commits
  • 03f3615 Bump version: 81.0.0 → 82.0.0
  • 530d114 Merge pull request #5007 from pypa/feature/remove-more-pkg_resources
  • 11efe9f Merge branch 'maint/75.3'
  • 118f129 Bump version: 75.3.3 → 75.3.4
  • 90561ff Merge pull request #5150 from UladzimirTrehubenka/backport_cve_47273
  • 4595034 Add news fragment.
  • fc00800 Merge pull request #5171 from cclauss/ruff-v0.15.0
  • 127e561 Remove tests reliant on pkg_resources, rather than xfailing them.
  • 64bc21e Reference the superseding libraries.
  • cf1ff45 Merge branch 'main' into debt/pbr-without-pkg_resources
  • Additional commits viewable in compare view

Updates globus-compute-sdk from 4.3.0 to 4.5.0

Release notes

Sourced from globus-compute-sdk's releases.

4.5.0

What's Changed

Full Changelog: globus/globus-compute@4.4.0...4.5.0

4.4.0

What's Changed

Full Changelog: globus/globus-compute@4.3.0...4.4.0

Changelog

Sourced from globus-compute-sdk's changelog.

globus-compute-sdk & globus-compute-endpoint v4.5.0

New Functionality ^^^^^^^^^^^^^^^^^

  • When running an endpoint under a non-root user, environment variables from the parent process are now passed to the user endpoint process. (Endpoints run as root still start with a clean environment.)

.. _changelog-4.4.0:

globus-compute-sdk & globus-compute-endpoint v4.4.0

New Functionality ^^^^^^^^^^^^^^^^^

  • Added two options to globus-compute-endpoint configure, --manager-config and --template-config, which allow specifying alternate configuration files to be copied into the new endpoint directory during configuration.

Deprecated ^^^^^^^^^^

  • Deprecated the --endpoint-config option of globus-compute-endpoint configure, in favor of the new --manager-config and --template-config options.

Changed ^^^^^^^

  • Bumped parsl dependency version from 2025.12.01 <https://pypi.org/project/parsl/2025.12.01/>_ to 2026.1.5 <https://pypi.org/project/parsl/2026.1.5/>_.

.. _changelog-4.3.0:

Commits

Updates anyio from 4.12.0 to 4.12.1

Release notes

Sourced from anyio's releases.

4.12.1

  • Changed all functions currently raising the private NoCurrentAsyncBackend exception (since v4.12.0) to instead raise the public NoEventLoopError exception (#1048)
  • Fixed anyio.functools.lru_cache not working with instance methods (#1042)
Commits
  • a0dccbd Bumped up the version
  • e1121a7 Enabled tests for the 4.12.x branch
  • 69ab43e Fixed anyio.functools.lru_cache not working with methods (#1056)
  • 4f4b33e Remove BlockingPortal.__new__ hack (#1053)
  • af17d89 Replaced the NoCurrentAsyncBackend exception with NoEventLoopError (#1049)
  • 4310264 Updated pre-commit modules
  • 0cc6723 Bump the github-actions group with 3 updates (#1051)
  • See full diff in compare view

Updates rich from 14.2.0 to 14.3.2

Release notes

Sourced from rich's releases.

The ZWJy release

A fix for cell_len edge cases

[14.3.2] - 2026-02-01

Fixed

The Nerdy Fix release

Fixed issue with characters outside of unicode range reporting 0 cell size

[14.3.1] - 2026-01-24

Fixed

The more emojis release

Rich now has support for multi-codepoint emojis. There have also been some Markdown improvements, and a number of fixes. See the release notes below for details.

[14.3.0] - 2026-01-24

Fixed

Added

Changed

Changelog

Sourced from rich's changelog.

[14.3.2] - 2026-02-01

Fixed

[14.3.1] - 2026-01-24

Fixed

[14.3.0] - 2026-01-24

Fixed

Added

Changed

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [surmise](https://github.com/bandframework/surmise), [pip](https://github.com/pypa/pip), [setuptools](https://github.com/pypa/setuptools), [globus-compute-sdk](https://github.com/globus/globus-compute), [anyio](https://github.com/agronholm/anyio) and [rich](https://github.com/Textualize/rich) to permit the latest version.

Updates `surmise` to 0.4.0
- [Release notes](https://github.com/bandframework/surmise/releases)
- [Changelog](https://github.com/bandframework/surmise/blob/main/CHANGELOG.rst)
- [Commits](bandframework/surmise@v0.3.0...v0.4.0)

Updates `pip` to 26.0.1
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@24.3.1...26.0.1)

Updates `setuptools` to 82.0.0
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v75.1.0...v82.0.0)

Updates `globus-compute-sdk` from 4.3.0 to 4.5.0
- [Release notes](https://github.com/globus/globus-compute/releases)
- [Changelog](https://github.com/globus/globus-compute/blob/main/docs/changelog.rst)
- [Commits](globus/globus-compute@4.3.0...4.5.0)

Updates `anyio` from 4.12.0 to 4.12.1
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.12.0...4.12.1)

Updates `rich` from 14.2.0 to 14.3.2
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v14.2.0...v14.3.2)

---
updated-dependencies:
- dependency-name: surmise
  dependency-version: 0.4.0
  dependency-type: direct:development
  dependency-group: python-updates
- dependency-name: pip
  dependency-version: 26.0.1
  dependency-type: direct:development
  dependency-group: python-updates
- dependency-name: setuptools
  dependency-version: 82.0.0
  dependency-type: direct:development
  dependency-group: python-updates
- dependency-name: globus-compute-sdk
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-updates
- dependency-name: anyio
  dependency-version: 4.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-updates
- dependency-name: rich
  dependency-version: 14.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 10, 2026
@codecov
Copy link

codecov bot commented Feb 10, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.31%. Comparing base (6eedfbe) to head (c462ffb).

Additional details and impacted files
@@           Coverage Diff            @@
##           develop    #1675   +/-   ##
========================================
  Coverage    78.31%   78.31%           
========================================
  Files           76       76           
  Lines         7591     7591           
  Branches      1120     1120           
========================================
  Hits          5945     5945           
  Misses        1460     1460           
  Partials       186      186           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants